Cybersecurity Incident Response Lead / Information Security Director

Role overview

Incident response and resilience

• Develop and maintain cybersecurity incident-response strategies, procedures, and playbooks.
• Lead detection, analysis, containment, investigation, and recovery of security incidents.
• Coordinate incident-response activities across IT, engineering, legal, compliance, and business teams.
• Establish and monitor security operations, incident-management, and cyber-resilience processes.
• Assess emerging threats, vulnerabilities, attack patterns, and potential business impacts.
• Lead post-incident reviews and implement corrective actions to prevent recurrence.
• Develop and maintain business continuity, disaster recovery, and cyber-crisis response plans.

Security leadership and governance

• Develop information-security policies, standards, controls, and governance frameworks.
• Conduct security risk assessments and recommend mitigation strategies.
• Oversee vulnerability management, security monitoring, access controls, and threat-detection initiatives.
• Support security architecture and technology decisions from a risk-management perspective.
• Monitor security metrics, incident trends, control effectiveness, and organizational risk exposure.
• Coordinate security assessments, audits, penetration-testing activities, and compliance reviews.
• Manage relationships with security vendors, managed security providers, and external specialists.
• Provide security-awareness guidance and promote a strong cybersecurity culture.
• Prepare executive-level security reports, risk summaries, incident updates, and strategic recommendations.

Qualifications and experience

• At least 3 years of professional experience in cybersecurity, information security, incident response, security operations, or a related field is preferred.
• A bachelor's degree or equivalent in Cybersecurity, Information Technology, Computer Science, or a related discipline is preferred.
• Strong understanding of incident response, threat detection, vulnerability management, and security risk management.
• Experience handling incidents from initial detection through containment, recovery, and post-incident analysis.
• Knowledge of security frameworks, controls, governance practices, and risk-management principles.
• Strong analytical, investigative, decision-making, and crisis-management skills.
• Ability to communicate complex cybersecurity risks to technical and non-technical stakeholders.
• Experience with SIEM, EDR, vulnerability-management, identity-security, and security-monitoring technologies.
• Strong understanding of cloud, network, endpoint, application, and data-security concepts.
• Ability to manage confidential information and work effectively under pressure.
• Strong leadership and stakeholder-management capabilities in a remote environment.
• Professional certifications are not required unless specifically relevant to the role.

What the organization offers

• Flexible part-time work with a fully remote arrangement.
• Opportunity to lead cybersecurity and organizational-resilience initiatives and work with international technology environments and executive stakeholders.
• Access to modern security, monitoring, collaboration, and analytical technologies.
• Competitive compensation aligned with experience and responsibilities; no compensation cadence is stated.
• Professional growth across cybersecurity leadership, incident response, governance, and risk management.